General

  • Target

    JaffaCakes118_15fe1be0181a3eb3cc0c9eca795e1baf

  • Size

    116KB

  • Sample

    250106-h683gsznbv

  • MD5

    15fe1be0181a3eb3cc0c9eca795e1baf

  • SHA1

    ae6b11f234e6112c0e1e166731cf27189393d150

  • SHA256

    cece82b7a8d4d9d778549a6be2818fc7bb8ce944335162f8408ad817b6e2de31

  • SHA512

    84c0562b65a6b90026b82ffe4d4bc91c091dd6184ff69db5d1497756d6a592ebc26873cfcabce74cbcddee5d94011e14f280de5f472f919fad519130feb5a53b

  • SSDEEP

    3072:idwracAAviNmLpMQ1xr5hKHKSrbqlAdmyDQUJ1UX4Tn:SwraFgikxr5hKHKnlAdmyDQUJ1a4Tn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

107.189.10.234:4258

Targets

    • Target

      JaffaCakes118_15fe1be0181a3eb3cc0c9eca795e1baf

    • Size

      116KB

    • MD5

      15fe1be0181a3eb3cc0c9eca795e1baf

    • SHA1

      ae6b11f234e6112c0e1e166731cf27189393d150

    • SHA256

      cece82b7a8d4d9d778549a6be2818fc7bb8ce944335162f8408ad817b6e2de31

    • SHA512

      84c0562b65a6b90026b82ffe4d4bc91c091dd6184ff69db5d1497756d6a592ebc26873cfcabce74cbcddee5d94011e14f280de5f472f919fad519130feb5a53b

    • SSDEEP

      3072:idwracAAviNmLpMQ1xr5hKHKSrbqlAdmyDQUJ1UX4Tn:SwraFgikxr5hKHKnlAdmyDQUJ1a4Tn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks